Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
File: GNo6QLEX-yVyzPekwnLS7GklKRw.mft (raw, json)
Hash identifier: /tSweZWfhATLBSNe69zIJWQiWJ28MtOV7M+L2spWSSg=
Subject key identifier: A8:B5:D2:33:8E:C9:1A:B5:76:81:FD:26:FA:8B:EE:F1:10:C9:B7:47
Authority key identifier: 18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C
Certificate issuer: /CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
Certificate serial: 0198496637B546DA0345D0F484D37A6E6755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 01:01:32 +0000
Manifest this update: Sun 27 Jul 2025 01:01:32 +0000
Manifest next update: Mon 28 Jul 2025 01:01:32 +0000
Files and hashes: 1: GNo6QLEX-yVyzPekwnLS7GklKRw.crl (hash: m7QWwnac+pwdUK+IZnwyn9uSfSLKT8pVBJVmVUPiHS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:37:b5:46:da:03:45:d0:f4:84:d3:7a:6e:67:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
Validity
Not Before: Jul 27 01:01:32 2025 GMT
Not After : Jul 28 01:01:32 2025 GMT
Subject: CN=a8b5d2338ec91ab57681fd26fa8beef110c9b747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:08:d6:fd:e6:f8:d1:87:fb:dc:1d:98:b1:
2a:14:c4:d5:bb:bc:21:ad:71:77:66:33:04:75:f0:
6c:ea:d0:b4:d6:79:c1:1e:b4:5a:f8:56:1a:52:1c:
cc:a3:0d:a2:a3:dd:b9:fd:f9:67:f2:0c:01:36:54:
3b:a3:59:62:a9:9f:b5:54:4b:c9:84:eb:a2:55:ce:
9f:31:c5:f5:d5:c7:4a:1d:23:c2:85:12:30:8d:a0:
43:73:b8:6d:8c:6a:f2:d2:4f:dd:87:22:cc:c4:02:
40:da:03:eb:15:6b:7c:2e:69:9e:aa:ed:71:3f:c9:
82:e6:32:ba:40:5d:4a:f0:4c:5d:92:28:40:b0:fd:
25:a8:ce:9b:4b:9a:2e:a7:56:db:6a:cf:ee:f7:10:
04:cc:87:ae:58:b2:90:e5:27:ef:93:31:5c:5d:7d:
58:40:d7:c6:29:3c:64:41:b4:c0:d4:8c:b8:bf:4c:
71:05:5d:bc:e2:6d:40:97:d9:c2:c3:d8:ee:c9:39:
3e:6f:a3:a3:7d:87:89:47:d7:dc:34:0b:ae:91:e1:
99:35:d1:97:b1:56:f7:ef:7f:8b:0b:a1:47:33:e0:
7d:3f:80:5a:d5:be:db:f2:39:cd:5a:3b:07:a8:82:
5d:7e:79:79:24:c9:79:da:f6:e4:80:c1:fb:df:46:
00:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B5:D2:33:8E:C9:1A:B5:76:81:FD:26:FA:8B:EE:F1:10:C9:B7:47
X509v3 Authority Key Identifier:
keyid:18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cb:dc:72:86:4d:35:b8:f8:1f:3e:09:45:fd:42:5c:14:c7:
05:b9:48:36:f8:8d:2d:2f:2f:52:c0:c5:cf:6a:f5:87:3f:ff:
e5:ed:1f:0e:4c:6e:ab:b0:00:89:87:26:d0:52:70:be:22:d8:
e3:fb:b5:c8:41:8b:01:5d:0b:66:0b:70:55:08:52:d5:fa:ac:
88:72:ab:8c:71:93:10:37:2c:e3:62:fc:6b:30:6f:58:cb:e9:
41:ec:fc:81:30:d3:18:a0:50:1a:e1:1b:07:c2:75:5c:8c:93:
9b:54:01:b0:64:81:4d:de:2d:b4:94:d1:e9:f4:a6:5a:ec:1e:
39:f7:3a:1c:9b:77:59:5f:05:9d:e2:63:bd:a7:fd:48:d5:14:
d1:56:41:ec:a5:5d:6b:23:c0:9b:09:84:b2:17:bc:2d:41:11:
28:dc:56:8c:2f:2f:c6:41:5d:ac:85:a7:ed:c5:65:c9:e2:92:
6e:d4:0b:50:5c:91:92:fb:1a:7b:cd:bb:f5:d2:7f:02:8e:f2:
4d:5e:81:ca:6a:3f:4c:78:ed:17:ab:83:5f:7b:1a:68:5c:61:
0c:02:d7:48:8e:41:b8:0e:ae:57:b6:d3:79:b8:c6:d5:71:df:
10:8d:2c:a0:3b:4f:e2:98:cc:5c:a1:c8:00:0e:a2:91:dd:11:
25:47:d4:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZje1RtoDRdD0hNN6bmdVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZGEzYTQwYjExN2ZiMjU3MmNjZjdhNGMyNzJkMmVjNjky
NTI5MWMwHhcNMjUwNzI3MDEwMTMyWhcNMjUwNzI4MDEwMTMyWjAzMTEwLwYDVQQD
EyhhOGI1ZDIzMzhlYzkxYWI1NzY4MWZkMjZmYThiZWVmMTEwYzliNzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwcI1v3m+NGH+9wdmLEqFMTVu7wh
rXF3ZjMEdfBs6tC01nnBHrRa+FYaUhzMow2io925/fln8gwBNlQ7o1liqZ+1VEvJ
hOuiVc6fMcX11cdKHSPChRIwjaBDc7htjGry0k/dhyLMxAJA2gPrFWt8Lmmequ1x
P8mC5jK6QF1K8ExdkihAsP0lqM6bS5oup1bbas/u9xAEzIeuWLKQ5SfvkzFcXX1Y
QNfGKTxkQbTA1Iy4v0xxBV284m1Al9nCw9juyTk+b6OjfYeJR9fcNAuukeGZNdGX
sVb373+LC6FHM+B9P4Ba1b7b8jnNWjsHqIJdfnl5JMl52vbkgMH730YAoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi10jOOyRq1doH9JvqL7vEQybdHMB8GA1UdIwQY
MBaAFBjaOkCxF/slcsz3pMJy0uxpJSkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR05vNlFMRVgteVZ5elBla3duTFM3R2tsS1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yODk3OWItMGEzNC00YTVjLWEyZmUt
Njk4ZDkxMmI3MzQ2LzEvR05vNlFMRVgteVZ5elBla3duTFM3R2tsS1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yODk3OWItMGEzNC00YTVjLWEyZmUtNjk4ZDkxMmI3MzQ2
LzEvR05vNlFMRVgteVZ5elBla3duTFM3R2tsS1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcvccoZN
Nbj4Hz4JRf1CXBTHBblINviNLS8vUsDFz2r1hz//5e0fDkxuq7AAiYcm0FJwviLY
4/u1yEGLAV0LZgtwVQhS1fqsiHKrjHGTEDcs42L8azBvWMvpQez8gTDTGKBQGuEb
B8J1XIyTm1QBsGSBTd4ttJTR6fSmWuweOfc6HJt3WV8FneJjvaf9SNUU0VZB7KVd
ayPAmwmEshe8LUERKNxWjC8vxkFdrIWn7cVlyeKSbtQLUFyRkvsae8279dJ/Ao7y
TV6Bymo/THjtF6uDX3saaFxhDALXSI5BuA6uV7bTebjG1XHfEI0soDtP4pjMXKHI
AA6ikd0RJUfU5w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:48 2025 by rpki-client